arXiv: Bits and Memories: Measuring Verbatim Extraction Across LLM Quantization

A new research paper, "Bits and Memories: Measuring Verbatim Extraction Across LLM Quantization," published on arXiv, presents findings that quantizing large language models (LLMs) to lower precision (e.g., 4-bit or 8-bit) can significantly increase the risk of verbatim extraction of training data. This means that compressed models are more likely to reproduce sensitive or copyrighted text verbatim when prompted, raising concerns about data leakage and intellectual property violations. The study systematically measures this extraction risk across different quantization levels and model architectures.

This regulatory change primarily affects organizations deploying or fine-tuning quantized LLMs in high-stakes sectors such as finance, healthcare, legal services, and customer-facing AI products. Any entity subject to GDPR, the EU AI Act, or sector-specific data protection rules must consider this risk, as it could lead to non-compliance with data minimization, accuracy, and transparency obligations. Model providers and deployers in the EU are particularly impacted, given the AI Act's focus on systemic risk and data governance.

Compliance teams should immediately review their model deployment pipelines to assess whether quantized models are in use or planned. They should conduct internal audits to test for verbatim extraction in their specific use cases, especially for models trained on proprietary or personal data. Teams should also update their risk assessments and documentation to reflect this new evidence, and consider implementing output filtering or differential privacy techniques as mitigations. Engaging with model developers to understand quantization trade-offs is also recommended.